2 ms·
> Or, maybe, IM with OTR without logging, but that . . . might also fall prey to crazy counterparty either not disabling logging or intentionally recording and
by losvedir 14y ago
> Or, maybe, IM with OTR without logging, but that . . . might also fall prey to crazy counterparty either not disabling logging or intentionally recording and blackmailing.
I thought this was one of the benefits of OTR over, say, PGP. That is, with PGP if you sign a message the counterparty can wave it around and say "look at what this poerson said", while with OTR, since the encryption is done with a shared key, it could be just as likely that the counterparty made it up.
At least, that's what I gleaned from this wonderful video[1] someone linked to on HN yesterday.
[1] https://www.youtube.com/watch?v=eG0KrT6pBPk https://www.youtube.com/watch?v=eG0KrT6pBPk
- rdl 14y agoThe problem is your client can still log the pre or post crypto plaintext. I believe pidgin or some other shitty IM client does that by default, even with OTR. So, I mean "use OTR, and ALSO disable client logging".
- kbaker 14y agoIt's Adium that logs by default, not Pidgin (which correctly disables logging.) http://trac.adium.im/ticket/15722 http://trac.adium.im/ticket/15722